package com.bw.controller;

import com.bw.entity.User;
import com.bw.mapper.UserMapper;
import org.spring.kun.common.Md5Utils;
import org.spring.kun.common.TokenUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.validation.BindingResult;
import org.springframework.web.bind.annotation.RequestMapping;

import javax.servlet.http.HttpServletResponse;
import javax.validation.Valid;

@Controller
public class LoginController {

    @Autowired
    UserMapper userMapper;


    @RequestMapping("/loginPage.do")
    public String loginPage() {

        return "login";
    }

    @RequestMapping("/login.do")
    public String login(@Valid User loginUser, BindingResult result, Model model, HttpServletResponse response) {
        if (result.hasErrors()) {

            model.addAttribute("error", result.getAllErrors().get(0).getDefaultMessage());
            return "login";
        }
        //用户名不存在
        User userDB = userMapper.selectByName(loginUser.getName());
        if (userDB == null) {
            model.addAttribute("error", "用户名不存在");
            return "login";

        }
        //密码错误
        String loginUserPassword = loginUser.getPassword(); //用户输入的密码
        String password = userDB.getPassword(); // 数据库里的密码
        String salt = userDB.getSalt();
        // 加密用户输入的密码 + 数据库的盐
        String md5String = Md5Utils.getMD5String(loginUserPassword + salt);
        if (!md5String.equals(password)) {
            model.addAttribute("error", "密码错误");
            return "login";

        }
        // 加密用户信息 得到token令牌，  把token放到cookie里    把cookie返回给浏览器， 浏览器保存，   token 和cookie都是30分钟过期
        TokenUtils.responseTokenByCookie(userDB, response, 30);
        return "redirect:list.do";
    }


}
